GraphKit

0.2.2

App-only, multi-tenant Microsoft Graph execution and analysis layer with explicit Intune and Entra operation semantics.

Minimum PowerShell version

7.4

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name GraphKit

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name GraphKit

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) Adam Gell. All rights reserved.

Package Details

Author(s)

  • Adam Gell

Tags

Microsoft365 MicrosoftGraph Graph Intune Entra EntraID MDM DeviceManagement MultiTenant AppOnly Automation Windows Linux MacOS

Functions

Compare-GraphPermission Export-GraphResult Get-GraphAppRegistrationPermission Get-GraphContext Get-GraphObject Get-GraphOperation Get-GraphTenant Grant-GraphAppPermission Import-GraphLegacyProfile Invoke-GraphBatch Invoke-GraphOperation Register-GraphTenant Remove-GraphTenant Test-GraphPermission Test-GraphTenant Use-GraphTenant

Dependencies

This module has no dependencies.

Release Notes

0.2.2

Thirteen read-only Graph descriptors so TenantPulse can drop descriptor-pending on the
checks that were waiting on this catalog. Official GETs only; no Walk composites.

ADDED
- RoleAssignmentScheduleInstance.List and RoleEligibilityScheduleInstance.List
 (/roleManagement/directory/..., v1.0) for TP.ENT.0022.
- CrossTenantAccessPolicy.GetDefault (/policies/crossTenantAccessPolicy/default, v1.0)
 for TP.ENT.0023. The default singleton, not the parent policy object.
- ApplePushNotificationCertificate.Get (v1.0, certificate declared sensitive),
 AndroidManagedStoreAccountEnterpriseSettings.Get (beta), and
 MobileThreatDefenseConnector.List (v1.0) for TP.INT.0019/0022/0024.
- OperationApprovalPolicy.List, IntuneBrandingProfile.List, and
 WindowsFeatureUpdateProfile.List (beta) for TP.INT.0008/0011/0012.
- WindowsAutopilotDeploymentProfile.List (beta, $expand=assignments is the operation
 identity) for TP.INT.0026.
- DeviceManagementRoleDefinition.List, DeviceManagementRoleAssignment.List
 (/deviceManagement/roleAssignments, v1.0), and Group.Get (v1.0, $select of
 isAssignableToRole/isManagementRestricted) as primitives for TP.INT.0013.

NOT SHIPPED
- DataProcessorServiceForWindowsFeaturesOnboarding.Get (TP.INT.0009): resource page
 exists on beta, official GET method page does not.

Already in the catalog, so no new descriptor: AuthorizationPolicy.Get and
DirectorySetting.List (TP.ENT.0012/0013/0015/0016); ConfigurationPolicy.ListBeta plus
settings/assignment siblings (TP.INT.0014/0015/0029).

Requires PowerShell 7.4+.

FileList

Version History

Version Downloads Last updated
0.2.2 (current version) 12 8/19/2026
0.2.0 6 8/17/2026
0.1.1 88 8/16/2026
0.1.0 15 8/16/2026